Chilean Data Protection Law (Ley 21.719 / Ley 19.628 as amended)

Latin AmericaPrivacy2024
ByDecipherU Editorial

Chile enacted a major cybersecurity and data protection reform in December 2024 (Ley 21.719), replacing its outdated 1999 framework. The new law creates an autonomous Data Protection Agency, introduces GDPR-aligned rights (access, rectification, erasure, portability, objection), mandates breach notification, and establishes penalties based on organizational revenue. The law enters full force in December 2026.

Quick Reference

EnactedDecember 13, 2024; full enforcement December 2026
Enforcement BodyAgencia de Protección de Datos Personales (new autonomous agency)
PenaltiesSerious violations: up to 10,000 UTM (approximately $800,000 USD); very serious: up to 20,000 UTM or 2% of annual revenue
Applicable ToAny entity processing personal data in Chile or of Chilean residents

Key Requirements

Artículo 14 quinquies (Security of personal data)

Data controllers must adopt adequate security measures considering the nature of the data, the processing scope, the context, and the specific risks

Artículo 14 sexies (Breach notification)

Data controllers must notify the Data Protection Agency and affected data subjects of security breaches affecting personal data

Artículo 8° (Right of access)

Data subjects have the right to request and obtain confirmation of whether their personal data is being processed and to access such data

How Does Chile Data Protection Law Affect Cybersecurity Careers?

Chile's 2024 reform creates a new regulatory framework that cybersecurity professionals must learn before December 2026 enforcement. The new autonomous Data Protection Agency will create government cybersecurity and compliance roles. Chile's established tech sector in Latin America makes this a significant regional compliance requirement.

Cybersecurity Roles That Work With Chile Data Protection Law

Related Cybersecurity Certifications

Related Cybersecurity Laws

Read the full text of Chile Data Protection Law at the official source: https://www.bcn.cl/leychile/navegar?idNorma=1209272

Frequently Asked Questions

What is Chile Data Protection Law in cybersecurity?

Chile enacted a major cybersecurity and data protection reform in December 2024 (Ley 21.719), replacing its outdated 1999 framework. The new law creates an autonomous Data Protection Agency, introduces GDPR-aligned rights (access, rectification, erasure, portability, objection), mandates breach notification, and establishes penalties based on organizational revenue. The law enters full force in December 2026.

How does Chile Data Protection Law affect cybersecurity careers?

Chile's 2024 reform creates a new regulatory framework that cybersecurity professionals must learn before December 2026 enforcement. The new autonomous Data Protection Agency will create government cybersecurity and compliance roles. Chile's established tech sector in Latin America makes this a significant regional compliance requirement.

What are the penalties for Chile Data Protection Law non-compliance?

Serious violations: up to 10,000 UTM (approximately $800,000 USD); very serious: up to 20,000 UTM or 2% of annual revenue

Last verified: April 2026?Report an inaccuracy

Explore Related Cybersecurity Resources

Was this page helpful?